energy-procurement
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data, which could contain malicious instructions meant to override agent behavior.
- Ingestion points: The skill processes utility bill management platform data (Urjanet, EnergyCAP), 15-minute interval meter data (CSV), and market data from external providers (ICE, CME, Platts).
- Boundary markers: There are no explicit instructions or delimiters in the skill to treat external data as untrusted or to ignore any embedded prompt instructions.
- Capability inventory: The skill focus is analytical and text-generative. It does not include scripts or commands for subprocess execution, file system modification, or direct network operations.
- Sanitization: The instructions do not specify any validation or sanitization procedures for data ingested from external sources.
Audit Metadata